Updated Packages:
acl-2.2.7-4 ----------- * Tue Mar 30 2004 Stephen C. Tweedie sct@redhat.com 2.2.7-3
- Add /usr/include/acl to files manifest - Fix location of doc files, add main doc dir to files manifest
anaconda-9.92-0.20040331011453 ------------------------------ * Wed Mar 31 2004 Anaconda team bugzilla@redhat.com
- built new version from CVS
* Tue Feb 24 2004 Jeremy Katz katzj@redhat.com
- buildrequire libselinux-devel
* Thu Nov 06 2003 Jeremy Katz katzj@redhat.com
- require booty (#109272)
attr-2.4.1-3 ------------ * Tue Mar 30 2004 Stephen C. Tweedie sct@redhat.com 2.4.1-3
- Add /usr/include/attr to files manifest - Fix location of doc files, add main doc dir to files manifest
cdrdao-1.1.8-3 -------------- * Tue Mar 30 2004 Harald Hoyer harald@redhat.com - 1.1.8-3
- fixed ISO C++ issues
* Fri Feb 20 2004 Harald Hoyer harald@redhat.com - 1.1.8-2
- fixed ambigous operator cast
* Wed Feb 18 2004 Harald Hoyer harald@redhat.com - 1.1.8-1
- use scsilib from cdrecord-devel
freeradius-0.9.3-4 ------------------ * Tue Mar 30 2004 Harald Hoyer harald@redhat.com - 0.9.3-4
- gcc34 compilation fixes
ftpcopy-0.6.2-6 --------------- * Tue Mar 30 2004 Harald Hoyer harald@redhat.com - 0.6.2-6
- fixed compilation with gcc34
gdb-6.0post-0.20040223.14 ------------------------- * Tue Mar 30 2004 Elena Zannoni ezannoni@redhat.com 0.20040223.14
- re-enable pie.
* Tue Mar 30 2004 Elena Zannoni ezannoni@redhat.com 0.20040223.13
- Fix testsuite glitches.
* Wed Mar 24 2004 Elena Zannoni ezannoni@redhat.com 0.20040223.12
- Fix typo.
gstreamer-plugins-0.8.0-2 ------------------------- * Tue Mar 30 2004 Colin Walters walters@redhat.com 0.8.0-2
- Rebuild to pick up new libdv (hopefully). - Use one big glob to capture all plugins. No GStreamer plugin that's included directly in the tarball that I am aware of besides ffmpeg includes patented code directly, so this should be safe.
kernel-2.6.4-1.300 ------------------ * Tue Mar 30 2004 Arjan van de Ven arjanv@redhat.com
- 2.6.5-rc3 - fix PCI posting bug in i830 DRM
* Mon Mar 29 2004 Arjan van de Ven arjanv@redhat.com
- 2.6.5-rc2-bk8
* Mon Mar 29 2004 Dave Jones davej@redhat.com
- Include latest agpgart fixes.
libselinux-1.8-1 ---------------- * Fri Mar 26 2004 Dan Walsh dwalsh@redhat.com 1.8-1
- Upgrade to latest from NSA
* Thu Mar 25 2004 Dan Walsh dwalsh@redhat.com 1.6-6
- Add Russell's Man pages
licq-1.2.7-3 ------------ * Tue Mar 30 2004 Harald Hoyer harald@redhat.com - 1.2.7-3
- fixed gcc34 compilation issues
net-tools-1.60-24 ----------------- * Tue Mar 30 2004 Harald Hoyer harald@redhat.com - 1.60-24
- fixed compilation with gcc34
netpbm-10.19-7 -------------- * Tue Mar 30 2004 Harald Hoyer harald@redhat.com - 10.19-7
- fixed compilation with gcc34
policy-1.9.1-4 -------------- * Tue Mar 30 2004 Dan Walsh dwalsh@redhat.com 1.9.1-4
- Fix cups reading fonts.
* Tue Mar 30 2004 Dan Walsh dwalsh@redhat.com 1.9.1-3
- More fixes, fix for userhelper, postfix, screensaver
policycoreutils-1.9-18 ---------------------- * Mon Mar 29 2004 Dan Walsh dwalsh@redhat.com 1.9-18
- Warn on setfiles failure to relabel.
* Mon Mar 29 2004 Dan Walsh dwalsh@redhat.com 1.9-17
- Updated version of sestatus
postfix-2.0.18-3 ---------------- * Tue Mar 30 2004 Bill Nottingham notting@redhat.com 2:2.0.18-3
- add %defattr for pflogsumm package
redhat-artwork-0.95-1 --------------------- * Tue Mar 23 2004 Alexander Larsson alexl@redhat.com 0.95-1
- update to 0.95, fix logos to be in redhat-logos
rp-pppoe-3.5-13 --------------- * Tue Mar 30 2004 Than Ngo than@redhat.com 3.5-13
- fixed reconnect problem
rpmdb-fedora-1.91-0.20040331 ----------------------------
shadow-utils-4.0.3-21 --------------------- * Tue Mar 30 2004 Nalin Dahyabhai nalin@redhat.com 4.0.3-21
- rebuild
* Tue Mar 30 2004 Nalin Dahyabhai nalin@redhat.com 4.0.3-20
- make /etc/default world-readable, needed for #118338
system-config-httpd-1.2.0-2 --------------------------- * Thu Mar 04 2004 Karsten Hopp karsten@redhat.com
- fix console.apps file (#116023)
* Wed Feb 04 2004 Phil Knirsch pknirsch@redhat.com
- Added missing requires line for ghome-python2-canvas package.
* Mon Dec 08 2003 Phil Knirsch pknirsch@redhat.com 1.2.0-1
- Finished name switch to system-config-httpd from redhat-config-httpd
system-config-kickstart-2.5.9-1 ------------------------------- * Mon Mar 29 2004 Brent Fox bfox@redhat.com 2.5.9-1
- fix rhpl mouse bug (#119258) - more code to handle multi-platform
* Fri Mar 26 2004 Brent Fox bfox@redhat.com
- first stab at making system-config-kickstart arch aware (bug #91905) - removed LILO widgets
tcpdump-3.8.2-1 --------------- * Tue Mar 30 2004 Harald Hoyer harald@redhat.com - 14:3.8.2-1
- update to tcpdump-3.8.2, libpcap-0.8.2, arpwatch-2.1a13 - patched tcpdump configure for gcc34 optimizations - removed obsolete patches
xinitrc-3.39-1 -------------- * Tue Mar 30 2004 Mike A. Harris mharris@redhat.com 3.39-1
- Fix problem in xinput script caused due to a bit of over-quoting in recent changes, which result in logged erros (FC2 BLOCKER #119529)
xorg-x11-0.0.6.6-0.0.2004_03_11.11 ---------------------------------- * Tue Mar 30 2004 Mike A. Harris mharris@redhat.com 0.0.6.6-0.0.2004_03_11.11
- Added xorg-r200-uninitialized-variable-used.patch to CVS, as my last commit neglected to include the file.
* Tue Mar 30 2004 John Dennis jdennis@redhat.com 0.0.6.6-0.0.2004_03_11.10
- reenable libGL exec shield patch - also fix bug 119324 ia64 exec permissions on PLT in elfloader
* Thu Mar 25 2004 Mike A. Harris mharris@redhat.com
- Fixed uninitialized variable access in Radeon R200 driver, in r200_pixel.c with xorg-r200-uninitialized-variable-used.patch FC2t2 TARGET (#116661)
A word of warning: the version number of the policy file has changed in the kernel but some userland bits aren't in sync with it, causing file context labelling not to get done. Fresh installs are likely to fail.
Tim. */
On Wed, 2004-03-31 at 17:07 +0100, Tim Waugh wrote:
A word of warning: the version number of the policy file has changed in the kernel but some userland bits aren't in sync with it, causing file context labelling not to get done. Fresh installs are likely to fail.
Actually, today's rawhide also has a newer anaconda which catches this case and turns off SELinux if the policy fails to load :) Hearing about this yesterday was enough to motivate me to get to that so I could erase it off of my whiteboard
Jeremy
On Wed, 2004-03-31 at 11:07, Tim Waugh wrote:
A word of warning: the version number of the policy file has changed in the kernel but some userland bits aren't in sync with it, causing file context labelling not to get done. Fresh installs are likely to fail.
What userland bits caused a problem, so that we can avoid similar problems in the future? Compatibility should have been preserved: - the new kernel included code to accept either the new or old policy format - checkpolicy already included support for generating either policy format - SysVinit already included support for loading either policy format
It is true that the newer policy features can't be used until the policy package is updated to start building the new policy format, but that shouldn't have prevented continued operation of the new kernel with the older policy.
On Thu, 2004-04-01 at 08:30 -0500, Stephen Smalley wrote:
What userland bits caused a problem, so that we can avoid similar problems in the future? Compatibility should have been preserved:
- the new kernel included code to accept either the new or old policy
format
- checkpolicy already included support for generating either policy
format
- SysVinit already included support for loading either policy format
anaconda loads the policy specified in policyvers _only_. Otherwise, there's the fun question of how far back you go. Also, doing "fall back a version" things mean that you can _never_ change in a way that's not backwards compatible.
Jeremy
On Thu, Apr 01, 2004 at 08:30:15AM -0500, Stephen Smalley wrote:
On Wed, 2004-03-31 at 11:07, Tim Waugh wrote:
A word of warning: the version number of the policy file has changed in the kernel but some userland bits aren't in sync with it, causing file context labelling not to get done. Fresh installs are likely to fail.
What userland bits caused a problem, so that we can avoid similar problems in the future?
The script that builds the install image -- it had hard-coded 'policy.15' as one of the files to install, so we weren't actually getting any policy loaded at all.
I've fixed this in CVS, but until anaconda is rebuilt you can make an RHupdates directory (next to Fedora/ and images/) and put a policy.16 file, which you can get from rpm2cpio'ing the policy package, in that.
Tim. */
devel@lists.stg.fedoraproject.org
-
Build System -
Jeremy Katz -
Stephen Smalley -
Tim Waugh